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Amendments to the Specification: 

Please replace the title to read as follows: 

Method for Securely Supporting Password Change 

Please change paragraph [003] to read as follows: 

[003] In many large companies, the computer system is organized as a network to reduce the cost 
of purchasing and installing software on all the stations existing in the company. A main advantage of 
using a network is to facilitate data accessibility to each employee. However, it is necessary to limit 
access of a company's network to the company's employees. As such, prior to access to the company's 
network, a password window prompted the company's employees to enter a login identity and an 
associated password. Usually, a user specifies passwords. Most users, being unsophisticated users of 
security systems, classically choose as the login identity their first name, and their dog's name as a 
password for example. Each time a user is prompted to enter his password, the password is always 
identical to the one previously entered by the user unless the user has modified his password during a 
previous session. As such, many password systems are easily accessed through a simple trial and error 
process. 

Please change paragraph [0017] to read as follows: 

[001 7] Fig. 3 is a flow diagram of a prior art method of changing a password; 
Please change paragraph [0024] to read as follows: 

[0024] R e f e rring to Fig. 2 T illustrates an example of a screen display prompting an employee 
to enter a login identity and an associated password to allow the employee to access the network. 
An example of the display of Figure 4- 2 filled in is shown in Fig. 2a. Classically, the login 
identity is the user's name, illustrated here, as "Smith". For security purpose, each character of 
the password is replaced with a star on the display so that nobody can read it. Each time a user is 
prompted to enter his password, the password is always identical to the one previously entered by 
the user unless the user has changed his password during a previous session. 
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Please change paragraph [0034] to read as follows: 

[0034] Referring now to Fig. 7, a flow diagram of a method of securely supporting password 
change in accordance with another preferred embodiment of the present invention is shown. Here, a 
password change operation is detected and a secure user authorization process prompts the user for an 
authorization data. Once authorized, the system allows the change password operation to proceed. The 
new password is provided to allow changing of the password is stor e d in an independent database. 
The data indicative of the new password is automatically associated with the user identity in 
replacement of the data indicative of the old password. From the independent database, the new 
password is provided to a password database on the system to change the password there. The prompt 
for user authorization data by the secure authorization process instead of by the process associated 
with the system or application notifies the user that the password change operation has been detected 
and that the new password is accurately stored. 



Page 3 of 11 



